This prevents unintentional deletion of certificate obtained from external issuer during factory reset.
If the key pair (certificate + private keys) is deleted, the certificate will need to be reissued, potentially incurring additional costs.